Devices, filesystems, and mounts
Separate block devices from filesystems and mount points.
lsblk -f
25 min read, 30 min lab
operator
Storage commands are dangerous because names can be similar and device paths can change. `lsblk -f`, `blkid`, `findmnt`, and `df` connect device, filesystem, UUID, mount point, and capacity evidence.
A runbook says expand `/var`, but you need to identify the backing device and filesystem first.
Worked command
$ lsblk -f$ findmnt /var$ df -h /var$ blkid
Do not act on raw `/dev/sdX` names until you have verified the target from multiple signals.
Record device, filesystem, UUID, mount point, and capacity before any change.
A runbook says expand /var. Why must you treat the mount point /var as separate from its block device?
Show the answer
Correct: A. /var is a path where a filesystem is attached; the backing device can change names across reboots
A mount point is just where a filesystem is grafted into the tree; the kernel may enumerate /dev/sdX differently across boots, so you confirm the target via findmnt and the UUID from blkid. Treating /var as the device itself is the misconception that gets the wrong disk wiped.
Practice checklist
- Run read-only storage checks or use sample output.
- Map one mount point to a device and filesystem.
- Name the stable identifier.
Deliverable evidence
- A device/filesystem/mount table.
shows: How a mount point sits on a filesystem, on an LV stacked through VG and PV onto a block device, plus where growth and snapshots act.
does not prove: It is a schematic of the relationships, not evidence of your host's actual layout — only lsblk, findmnt, blkid, and lvs output prove that.
Commit these to memory, then drill them until recall is automatic.
cue One command that shows each block device with its filesystem type, UUID, and mount point
show recall target
lsblk -f